Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: products Clear
ID Title
CVE-2026-8197 Cross-Site Scripting (XSS) in concrete5/concrete5 (CVE-2026-8197)
cross-site scripting in concrete5/concrete5 (CVE-2026-8197). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-8135 Unsafe Deserialization in concrete5/concrete5 (CVE-2026-8135)
vulnerability in concrete5/concrete5 (CVE-2026-8135). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-47102 Authorization Flaw in litellm (CVE-2026-47102)
vulnerability in litellm (CVE-2026-47102). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.83.10` or later.
CVE-2026-47101 Authorization Flaw in litellm (CVE-2026-47101)
vulnerability in litellm (CVE-2026-47101). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.83.14` or later.
CVE-2026-46638 Vulnerability in twig/twig (CVE-2026-46638)
vulnerability in twig/twig (CVE-2026-46638). Confidential information can be exposed externally. Exploitable via ``Environment``. Mitigation: upgrade to `3.26.0` or later.
CVE-2026-46637 Vulnerability in twig/markdown-extra (CVE-2026-46637)
vulnerability in twig/markdown-extra (CVE-2026-46637). Risk of unauthorized operations or information disclosure. Exploitable via ``html``. Mitigation: upgrade to `3.26.0` or later.
CVE-2026-46635 Authorization Flaw in twig/twig (CVE-2026-46635)
vulnerability in twig/twig (CVE-2026-46635). Risk of unauthorized operations or information disclosure. Exploitable via ``column``. Mitigation: upgrade to `3.26.0` or later.
CVE-2026-46634 Vulnerability in twig/twig (CVE-2026-46634)
vulnerability in twig/twig (CVE-2026-46634). Successful exploitation can lead to full system takeover. Exploitable via ``SourcePolicyInterface``. Mitigation: upgrade to `3.26.0` or later.
CVE-2026-46633 Code Injection in twig/twig (CVE-2026-46633)
code injection in twig/twig (CVE-2026-46633). Successful exploitation can lead to full system takeover. Exploitable via ``SecurityPolicy``. Mitigation: upgrade to `3.26.0` or later.
CVE-2026-46629 Vulnerability in twig/intl-extra (CVE-2026-46629)
vulnerability in twig/intl-extra (CVE-2026-46629). Risk of unauthorized operations or information disclosure. Exploitable via ``IntlExtension``. Mitigation: upgrade to `3.26.0` or later.
CVE-2026-46628 Vulnerability in twig/twig (CVE-2026-46628)
vulnerability in twig/twig (CVE-2026-46628). Risk of unauthorized operations or information disclosure. Exploitable via ``spaceless``. Mitigation: upgrade to `3.26.0` or later.
CVE-2026-46643 OS Command Injection in KnpLabs/knp-snappy (CVE-2026-46643)
OS command injection in KnpLabs/knp-snappy (CVE-2026-46643). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.1` or later.
CVE-2026-46683 SSRF (Server-Side Request Forgery) in knplabs/knp-snappy (CVE-2026-46683)
SSRF in knplabs/knp-snappy (CVE-2026-46683). Risk of unauthorized operations or information disclosure. Exploitable via ``http``. Mitigation: upgrade to `1.7.0` or later.
CVE-2026-48246 Vulnerability in CVE-2026-48246 (CVE-2026-48246)
vulnerability in CVE-2026-48246 (CVE-2026-48246). Confidential information can be exposed externally.
CVE-2026-48245 Vulnerability in CVE-2026-48245 (CVE-2026-48245)
vulnerability in CVE-2026-48245 (CVE-2026-48245). Risk of unauthorized operations or information disclosure.
CVE-2026-48247 Vulnerability in CVE-2026-48247 (CVE-2026-48247)
vulnerability in CVE-2026-48247 (CVE-2026-48247). Confidential information can be exposed externally.
CVE-2026-48248 Vulnerability in CVE-2026-48248 (CVE-2026-48248)
vulnerability in CVE-2026-48248 (CVE-2026-48248). Confidential information can be exposed externally.
CVE-2026-48244 Vulnerability in CVE-2026-48244 (CVE-2026-48244)
vulnerability in CVE-2026-48244 (CVE-2026-48244). Risk of unauthorized operations or information disclosure.
CVE-2026-48249 Vulnerability in CVE-2026-48249 (CVE-2026-48249)
vulnerability in CVE-2026-48249 (CVE-2026-48249). Confidential information can be exposed externally.
CVE-2026-48235 SQL Injection in sqli (CVE-2026-48235)
SQL injection in sqli (CVE-2026-48235). Confidential information can be exposed externally.
CVE-2026-48237 SQL Injection in sqli (CVE-2026-48237)
SQL injection in sqli (CVE-2026-48237). Confidential information can be exposed externally.
CVE-2026-48241 Vulnerability in CVE-2026-48241 (CVE-2026-48241)
vulnerability in CVE-2026-48241 (CVE-2026-48241). Successful exploitation can lead to full system takeover.
CVE-2026-48243 Vulnerability in CVE-2026-48243 (CVE-2026-48243)
vulnerability in CVE-2026-48243 (CVE-2026-48243). Risk of unauthorized operations or information disclosure.
CVE-2026-48242 Vulnerability in CVE-2026-48242 (CVE-2026-48242)
vulnerability in CVE-2026-48242 (CVE-2026-48242). Successful exploitation can lead to full system takeover.
CVE-2026-48236 SQL Injection in sqli (CVE-2026-48236)
SQL injection in sqli (CVE-2026-48236). Confidential information can be exposed externally.
CVE-2026-48239 SQL Injection in sqli (CVE-2026-48239)
SQL injection in sqli (CVE-2026-48239). Confidential information can be exposed externally.
CVE-2026-48240 SQL Injection in sqli (CVE-2026-48240)
SQL injection in sqli (CVE-2026-48240). Confidential information can be exposed externally.
CVE-2026-48238 SQL Injection in sqli (CVE-2026-48238)
SQL injection in sqli (CVE-2026-48238). Confidential information can be exposed externally.
CVE-2026-48232 SQL Injection in sqli (CVE-2026-48232)
SQL injection in sqli (CVE-2026-48232). Confidential information can be exposed externally.
CVE-2026-48233 SQL Injection in sqli (CVE-2026-48233)
SQL injection in sqli (CVE-2026-48233). Confidential information can be exposed externally.
CVE-2026-48234 SQL Injection in sqli (CVE-2026-48234)
SQL injection in sqli (CVE-2026-48234). Confidential information can be exposed externally.
CVE-2026-48223 Cross-Site Scripting (XSS) in CVE-2026-48223 (CVE-2026-48223)
cross-site scripting in CVE-2026-48223 (CVE-2026-48223). Risk of unauthorized operations or information disclosure.
CVE-2026-48224 Cross-Site Scripting (XSS) in CVE-2026-48224 (CVE-2026-48224)
cross-site scripting in CVE-2026-48224 (CVE-2026-48224). Risk of unauthorized operations or information disclosure.
CVE-2026-48216 Cross-Site Scripting (XSS) in CVE-2026-48216 (CVE-2026-48216)
cross-site scripting in CVE-2026-48216 (CVE-2026-48216). Risk of unauthorized operations or information disclosure.
CVE-2026-48226 Cross-Site Scripting (XSS) in CVE-2026-48226 (CVE-2026-48226)
cross-site scripting in CVE-2026-48226 (CVE-2026-48226). Risk of unauthorized operations or information disclosure.
CVE-2026-48227 Cross-Site Scripting (XSS) in CVE-2026-48227 (CVE-2026-48227)
cross-site scripting in CVE-2026-48227 (CVE-2026-48227). Risk of unauthorized operations or information disclosure.
CVE-2026-48220 Cross-Site Scripting (XSS) in CVE-2026-48220 (CVE-2026-48220)
cross-site scripting in CVE-2026-48220 (CVE-2026-48220). Risk of unauthorized operations or information disclosure.
CVE-2026-48229 Cross-Site Scripting (XSS) in CVE-2026-48229 (CVE-2026-48229)
cross-site scripting in CVE-2026-48229 (CVE-2026-48229). Risk of unauthorized operations or information disclosure.
CVE-2026-48221 Cross-Site Scripting (XSS) in CVE-2026-48221 (CVE-2026-48221)
cross-site scripting in CVE-2026-48221 (CVE-2026-48221). Risk of unauthorized operations or information disclosure.
CVE-2026-48228 Cross-Site Scripting (XSS) in CVE-2026-48228 (CVE-2026-48228)
cross-site scripting in CVE-2026-48228 (CVE-2026-48228). Risk of unauthorized operations or information disclosure.
CVE-2026-48222 Cross-Site Scripting (XSS) in CVE-2026-48222 (CVE-2026-48222)
cross-site scripting in CVE-2026-48222 (CVE-2026-48222). Risk of unauthorized operations or information disclosure.
CVE-2026-48231 SQL Injection in sqli (CVE-2026-48231)
SQL injection in sqli (CVE-2026-48231). Confidential information can be exposed externally.
CVE-2026-48217 Cross-Site Scripting (XSS) in CVE-2026-48217 (CVE-2026-48217)
cross-site scripting in CVE-2026-48217 (CVE-2026-48217). Risk of unauthorized operations or information disclosure.
CVE-2026-48219 Cross-Site Scripting (XSS) in CVE-2026-48219 (CVE-2026-48219)
cross-site scripting in CVE-2026-48219 (CVE-2026-48219). Risk of unauthorized operations or information disclosure.
CVE-2026-48225 Cross-Site Scripting (XSS) in CVE-2026-48225 (CVE-2026-48225)
cross-site scripting in CVE-2026-48225 (CVE-2026-48225). Risk of unauthorized operations or information disclosure.
CVE-2026-48218 Cross-Site Scripting (XSS) in CVE-2026-48218 (CVE-2026-48218)
cross-site scripting in CVE-2026-48218 (CVE-2026-48218). Risk of unauthorized operations or information disclosure.
CVE-2026-48230 Cross-Site Scripting (XSS) in CVE-2026-48230 (CVE-2026-48230)
cross-site scripting in CVE-2026-48230 (CVE-2026-48230). Risk of unauthorized operations or information disclosure.
CVE-2026-48214 Cross-Site Scripting (XSS) in CVE-2026-48214 (CVE-2026-48214)
cross-site scripting in CVE-2026-48214 (CVE-2026-48214). Risk of unauthorized operations or information disclosure.
CVE-2026-48215 Cross-Site Scripting (XSS) in CVE-2026-48215 (CVE-2026-48215)
cross-site scripting in CVE-2026-48215 (CVE-2026-48215). Risk of unauthorized operations or information disclosure.
CVE-2026-48213 Cross-Site Scripting (XSS) in CVE-2026-48213 (CVE-2026-48213)
cross-site scripting in CVE-2026-48213 (CVE-2026-48213). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →